3 ms·
I’ll bypass the technical inaccuracies in this comment to focus on the main important thing. > Then they have the trusted publisher thing (which doesn't and wo
by woodruffw 7mo ago
I’ll bypass the technical inaccuracies in this comment to focus on the main important thing.
> Then they have the trusted publisher thing (which doesn't and won't work with codeberg) where they just upload whatever comes from github's runners.
There’s no particular reason it wouldn’t work; it’s just OIDC and Codeberg could easily stand up an IdP. If you’re willing to put the effort into making this happen, I’d be happy (as I’ve said before) to review any contributions towards this end.
(The only thing that won’t work here is imputing malicious intent; that makes it seem like you have a score to settle rather than a genuine technical interest in the community.)
- LtWorf 7mo agoDid I misunderstand this conversation? https://discuss.python.org/t/new-oidc-providers-for-trusted-publishing/106334/9 https://discuss.python.org/t/new-oidc-providers-for-trusted-... It didn't look to me like codeberg was being seriously considered for inclusion.
- woodruffw 7mo agoI wrote in that thread that I think Forejo (or more precisely Codeberg) probably clears the bar for inclusion[1]. [1]: https://discuss.python.org/t/new-oidc-providers-for-trusted-publishing/106334/36 https://discuss.python.org/t/new-oidc-providers-for-trusted-...